What permissions should an AI agent have?

Agents should have minimal permissions necessary for their tasks, avoiding shared credentials and inheriting human permissions, with regular review as part of your access program.

Updated

The narrowest set of permissions that lets it do the specific job you hired it for. Agents should never inherit a human's permission set, and they should never share credentials with another agent or service. Permissions are granted at the tool level, scoped to the record types and actions the agent's job actually requires, and reviewed on the same cadence as the rest of your privileged-access program.

← Back to Help Center

Questions AI & Emerging Tech

Related questions

By the four-phase exit criteria, not by the model's benchmark scores. The readiness signal is operational: scoped identity in place, audit captures intent, discovery-mode plans match human-operator plans, governed execution has run a representative volume of writes with zero unrecoverable actions, and a governance cadence is established and attended. If any of those is missing, the agent is not ready to scale, regardless of how the model performs in isolation.

Read full article →

Yes, through Core dna MCP. Describe the change in plain language and the platform makes it against the same rules your team uses in the admin, with approval, audit, and rollback built in. Draft a promo, model a margin scenario before it goes live, audit recent overrides, or update contract pricing at renewal, all from a prompt. It runs on a live MCP server with 80+ tools and 400+ APIs. No price or promo goes live until the assigned approver signs off.

Read full article →

Yes, because the structure governs it. The agent acts inside the exact permissions each person already has, reads your inheritance model so it knows shared from local, and shows a per-property diff before anything ships. Every change runs through your approval rules, is logged with who/when/which property, and can be rolled back in one click. You don't configure new safety for the AI, the structure, permissions, and approvals you already built are what contain it.

Read full article →

Agentic commerce is online buying carried out by an AI agent on a shopper's behalf. The agent searches, compares and completes the purchase, often inside an assistant such as ChatGPT or Gemini, using open standards like the Agentic Commerce Protocol (ACP) or the Universal Commerce Protocol (UCP).

Read full article →

No. Agentic commerce sits on the customer's side and is about buying. Agentic operations sits on the operator's side and is about running the business. A company can use both for different purposes.

Read full article →

Core dna is built for agentic operations: running many properties from one platform by prompt, with approval, audit and rollback. It is not a consumer shopping-agent or a checkout protocol, though an operator can still sell through agentic commerce channels alongside it.

Read full article →

Agentic operations is when a business user prompts their platform in plain language to make operational changes, such as content, catalog and pricing updates, across multiple websites or stores at once. The agent works for the operator, not the shopper.

Read full article →

An AI feature helps one person finish a task faster inside one site, like drafting a headline or tagging an image.

Agentic operations go further: you describe an outcome once and the platform carries it out across every property you run, then routes it through your approval, audit, and rollback workflow.

Most platforms now add AI agents. The difference is whether those agents reach every property, touch commerce as well as content, and ship changes rather than stopping at a draft.

Read full article →

Most major enterprise CMS platforms now ship AI agents, and several expose them over MCP so external assistants can act on content.

The useful question in 2026 is no longer whether a platform has agents, but what they are allowed to do: how far across your properties one instruction reaches, whether they touch commerce or only content, and whether they ship through existing approvals.

Read full article →

Yes. Claude acts inside your roles and permissions, every change lands as a draft for approval, and everything is versioned and logged. You can preview, diff, and roll back before anything goes live.

Read full article →

An enterprise AI agent is a software actor that takes goals, plans actions, and calls tools against your production systems on its own initiative. The distinguishing trait is autonomy with consequence. Unlike a chatbot, an agent is doing work that changes state - updating records, dispatching workflows, calling APIs that move money or content or customers. Enterprise-grade means it operates inside the same identity, audit, and governance perimeter as the rest of your platform.

Read full article →

A chatbot answers. An agent acts. The chatbot lives in the conversation layer and hands off to a human or a workflow when something needs to happen. The agent owns the doing. That difference is why the governance model for agents looks more like the model for a privileged service account than like the model for a content surface.

Read full article →

MCP, the Model Context Protocol, is a standard for exposing tools to AI agents as a declarative surface. Instead of every agent integrating against every system through bespoke code, the system publishes its tools through MCP and the agent discovers and calls them through a single protocol. For enterprise rollouts, MCP matters because tool boundaries become enforceable. You grant an agent access to specific tools rather than to whole systems, and you can revoke access without rewriting the agent. Core dna's MCP server exposes 80+ tools across 400+ APIs, in production today.

Read full article →

In phases, with read-only first. The pattern that works is: prepare the environment with scoped identity and audit, validate the agent in discovery mode where it can plan but not write, promote it to governed execution with tight tool boundaries and rollback, then run it under continuous governance with a standing review cadence. The single most common failure mode is granting write access before discovery-mode validation is honestly complete.

Read full article →

No. Add Core dna as a connector in Claude, sign in with your existing login, and approve. No code, no config files, no IT ticket. If you can describe what you want, you can build it.

Want the exact steps? See the full setup guide.

Read full article →

Not for everyday work. The person who wants a change makes it by describing it. Developers get their time back for what genuinely needs engineering.

Read full article →

With a standing governance group, a monthly cadence, and the audit log as the agenda. Governance covers tool-permission drift, new-tool onboarding, model changes, incident review, and retiring tools the agent no longer needs. The governance group needs representation from digital, platform, security, and risk - not just the team that built the agent.

Read full article →

The same Core dna MCP works with ChatGPT, Claude, Gemini, Copilot, and Cursor. Connect whichever your team already uses.

Read full article →

Add Core dna as a connector in ChatGPT, then authorize it with your existing Core dna login. ChatGPT's setup has a few more steps than Claude's (you turn on developer mode and add the connector), but it's all clicks, no code.

Want the exact steps? See the full setup guide.

Read full article →

Yes. ChatGPT acts inside your roles and permissions, every change lands as a draft for approval, and everything is versioned and logged. You can preview, diff, and roll back before anything goes live.

Read full article →

Reading

Related posts

AI & Emerging Tech Vibe coding is the easy part. The hard parts come later. AI & Emerging Tech Probabilistic vs deterministic AI: a model guesses, so build what decides AI & Emerging Tech Google Universal Cart: What It Means for eCommerce AI & Emerging Tech Core dna MCP 2.0: build your own features, just by describing them AI & Emerging Tech Recommendation engines: how recommender systems work and what’s changing for eCommerce AI & Emerging Tech AI adoption rates count heads instead of work